GHSA-7x8g-h246-gvx3

Dolibarr authenticated Remote Code Execution

Source: GitHub Advisory Database (reviewed) High CVE-2020-35136

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	dolibarr/dolibarr	< 12.0.4	12.0.4

Details

As written in the advisory (Markdown source, shown as plain text).

Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilename_template parameter to admin/tools/dolibarr_export.php.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2020-35136 advisory
https://github.com/Dolibarr/dolibarr/commit/4fcd3fe49332baab0e424225ad10b76b47ebcbac web
https://github.com/Dolibarr/dolibarr package
https://github.com/Dolibarr/dolibarr/releases web
https://sourceforge.net/projects/dolibarr web
http://bilishim.com/2020/12/18/zero-hunting-2.html web